Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91f62f69-ef87-4b73-a067-1290200a046e.roa
File:                     91f62f69-ef87-4b73-a067-1290200a046e.roa (raw, json)
Hash identifier:          GeQ/L6Rqb1BdoR9ebmU/fgKya+KOgnLrA3fJyk1O9G0=
Subject key identifier:   57:69:AA:F5:09:1A:F4:7B:5A:FD:CE:C4:CC:9C:F6:D6:EE:22:1D:23
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       551E74562EAD06AE1C71A63FDF1C124044D2B574
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91f62f69-ef87-4b73-a067-1290200a046e.roa
Signing time:             Tue 14 Oct 2025 18:41:41 +0000
ROA not before:           Tue 14 Oct 2025 18:41:41 +0000
ROA not after:            Tue 18 Nov 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        99.84.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1e:74:56:2e:ad:06:ae:1c:71:a6:3f:df:1c:12:40:44:d2:b5:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Oct 14 18:41:41 2025 GMT
            Not After : Nov 18 23:59:59 2025 GMT
        Subject: serialNumber=ac5512bf8689e0854debac8a35dd28ad47d0b8a721cb15742b7923a10bb9e857, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:87:ca:cf:d3:64:44:6e:42:89:79:ad:cd:
                    1e:2c:30:3f:48:f9:c0:b8:de:9e:c5:12:e8:07:c0:
                    1a:a5:08:bf:91:5a:f4:77:3f:da:0f:1f:58:b2:96:
                    dc:3b:c6:56:bb:6f:55:89:6b:2e:d0:31:bb:a0:92:
                    ba:3f:59:dc:89:3d:26:ec:0b:1c:b8:07:c2:d5:5b:
                    fa:a4:52:fc:3d:57:11:7a:12:02:f9:5a:f9:f7:5c:
                    fc:80:36:0c:cd:4c:49:83:51:8d:5e:2f:69:3d:49:
                    ce:cc:f3:f7:f8:b9:d6:7d:eb:ec:53:5b:5f:3b:1b:
                    de:9a:8c:b6:f9:3d:8f:2f:94:7d:a1:d3:c0:b2:78:
                    8b:77:82:1e:13:33:c5:4d:e6:c4:51:98:d6:f3:1a:
                    ca:92:0a:c3:9b:b1:2f:23:d0:f6:3a:b7:06:f1:6d:
                    d1:50:65:2b:1b:9b:a5:24:77:40:c5:ba:c1:ec:e0:
                    98:5a:c9:7e:9e:e7:e1:64:56:d4:04:0b:d8:fe:01:
                    19:45:c4:c4:22:c3:4a:aa:c9:a4:6e:e3:3f:2f:ba:
                    03:b8:58:31:6a:78:af:7d:fc:c7:5f:c8:34:fb:54:
                    2c:49:0f:9c:84:bc:f9:87:2d:45:80:76:7f:19:d9:
                    d5:28:9b:76:13:90:40:11:45:41:2b:05:13:f2:53:
                    59:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:69:AA:F5:09:1A:F4:7B:5A:FD:CE:C4:CC:9C:F6:D6:EE:22:1D:23
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91f62f69-ef87-4b73-a067-1290200a046e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.84.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:98:6e:68:92:0c:14:21:8f:f6:63:0c:5b:d7:75:b0:79:
         57:a8:e7:d6:8a:32:f9:29:0d:93:a4:44:27:23:90:f9:7e:ba:
         eb:9f:07:55:2d:67:f1:9b:69:29:89:88:d4:9b:f7:c2:25:b6:
         05:05:29:3a:48:1e:62:45:ed:dc:84:82:20:06:3c:bf:9a:db:
         98:14:d3:c7:4b:23:0f:2a:f7:75:71:8e:07:84:c7:a5:0f:d6:
         b6:38:8a:db:77:e7:70:4c:97:80:09:87:f3:16:9d:ed:df:e9:
         a4:8b:de:96:37:28:fb:07:9f:9d:ff:67:c9:4c:65:e1:87:74:
         cb:bd:e2:75:f5:f0:19:4e:28:44:9b:38:d3:63:ba:71:76:9f:
         01:e1:a2:c1:20:7d:f8:76:f7:07:ba:1f:99:07:a2:40:c5:de:
         52:c7:b3:17:03:9b:a0:d2:9c:a1:a7:d1:29:19:8b:a4:b7:4f:
         11:09:71:b8:94:69:ca:6f:c0:18:05:99:ab:f7:44:5d:be:30:
         f8:be:f3:b0:e3:69:4d:90:be:db:73:49:15:45:4f:e9:b9:2d:
         b0:3c:9f:2f:02:3e:e3:af:9f:92:d3:eb:d5:af:ab:eb:bc:c1:
         ec:ee:a5:e1:86:be:49:cb:4a:8a:9e:43:2b:a0:35:58:12:1e:
         ba:48:3f:54
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVR50Vi6tBq4ccaY/3xwSQETStXQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MTg0MTQxWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BhYzU1MTJiZjg2ODllMDg1NGRlYmFjOGEzNWRkMjhhZDQ3
ZDBiOGE3MjFjYjE1NzQyYjc5MjNhMTBiYjllODU3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/LofKz9NkRG5CiXmtzR4sMD9I+cC43p7FEugHwBqlCL+R
WvR3P9oPH1iyltw7xla7b1WJay7QMbugkro/WdyJPSbsCxy4B8LVW/qkUvw9VxF6
EgL5Wvn3XPyANgzNTEmDUY1eL2k9Sc7M8/f4udZ96+xTW187G96ajLb5PY8vlH2h
08CyeIt3gh4TM8VN5sRRmNbzGsqSCsObsS8j0PY6twbxbdFQZSsbm6Ukd0DFusHs
4JhayX6e5+FkVtQEC9j+ARlFxMQiw0qqyaRu4z8vugO4WDFqeK99/MdfyDT7VCxJ
D5yEvPmHLUWAdn8Z2dUom3YTkEARRUErBRPyU1mTAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUV2mq9Qka9Hta/c7EzJz21u4iHSMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzkxZjYyZjY5LWVmODctNGI3My1hMDY3LTEyOTAyMDBhMDQ2ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjVJcwDQYJKoZIhvcNAQELBQADggEBAFAamG5okgwUIY/2Ywxb13WweVeo
59aKMvkpDZOkRCcjkPl+uuufB1UtZ/GbaSmJiNSb98IltgUFKTpIHmJF7dyEgiAG
PL+a25gU08dLIw8q93VxjgeEx6UP1rY4itt353BMl4AJh/MWne3f6aSL3pY3KPsH
n53/Z8lMZeGHdMu94nX18BlOKESbONNjunF2nwHhosEgffh29we6H5kHokDF3lLH
sxcDm6DSnKGn0SkZi6S3TxEJcbiUacpvwBgFmav3RF2+MPi+87DjaU2QvttzSRVF
T+m5LbA8ny8CPuOvn5LT69Wvq+u8wezupeGGvknLSoqeQyugNVgSHrpIP1Q=
-----END CERTIFICATE-----